Facebook stored hundreds of millions of passwords unprotected